8c3923cfbe51106af65b9a2f949bf18a_JaffaCakes118 | Triage

Sharing

General

Target

8c3923cfbe51106af65b9a2f949bf18a_JaffaCakes118
Size

564KB
MD5

8c3923cfbe51106af65b9a2f949bf18a
SHA1

5690eee5c92582064f8a8acc60c74b80da580dbc
SHA256

cd1aaa7811ea50ee80b56c39ed869565656b7ce39cfc72796f6f681b1b1f4970
SHA512

4d5b643b0aa16db6ffa1c80caf3ef00b9e2d21e2b140d372600f6199dd572815f8d9b2cc3175f801b1bb08c9b6d0d8ae5d1f65aad78ce100c4a737bc95183fcf
SSDEEP

6144:fvTyarPuKATYV2tTQNZJfn6tdsviTZuHUCFzuTYM/7bc0TgW7YEBk++XQLrlzYco:jWK98Ujfnw66TZxE1W7vQF5K/uTJBkS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c3923cfbe51106af65b9a2f949bf18a_JaffaCakes118

Files

8c3923cfbe51106af65b9a2f949bf18a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 324KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 164KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE